header

PeopleSoft Database SSL and REN server SSL setup


Step 1:
Request for Root and chain certificate from CA. He provided the Root/Chain CA
Step 2:
Paste and merge the chain certificate and then root certificate without space as below:
-----BEGIN CERTIFICATE-----    ß---------Chain Certificate
DHzvjJP9QoyDfz8uhZ2VrLWSJLyi6Y+t6xcaeoLP2ZFuQ==
-----END CERTIFICATE-----

-----BEGIN CERTIFICATE----- ß--------- Root Certificate
CI3zJpDC5fcgJCNs2ebb0gIFVbPv/ErfF6adulZkMV8gzURZVE=
-----END CERTIFICATE-----

========================================================================

STEP 3: Import the Entrust chain and root certificate to database
Import the certificate as below to peoplesoft.Navigate to PeopleTools->Security->Security Objects->Digital Certificates
Fill in the below information and click the +add root .Paste the above created in step 2 chain and root certificate by clicking Add root and click ok
Root CA
Entrust Root and Intermed Cer
Entrust Root and Intermed Cer
10/12/19  1:13:54PM

========================================================================

STEP #4. Generate the database Server certificate
Create a certificate request (CSR) from the PeopleSoft database as follows:
    a. Navigate to PeopleTools->Security->Security Objects->Digital Certificates
    b. Click '+' to add a new entry
        i.   Choose type = 'Cert'
        ii.  Enter any Alias name (eg 'REN SSL')
        iii. Click 'Magnifying Glass' next to Issuer Alias and choose the 'Entrust Root and Intermediate Cer' entry you created in step 2 above.
       iv.  Click the 'Request' hyperlink
            - For common name, enter the name of the box that the REN server is on
              eg:xxx.domain.com (Application server)
            - Enter other 'Subject' information (eg Org Unit, State, etc) as appropriate for your company
            - Keep the default values in the 'Key Pair Information' section
            - Leave the 'Additional Certificate Attributes' blank
            - Click 'OK'




. You are now presented with the certificate request.
         i. Copy everything from 'BEGIN NEW CERTIFICATE REQUEST' to 'END NEW CERTIFICATE REQUEST' to clipboard. Then click 'ok'
            Example:
            -----BEGIN NEW CERTIFICATE REQUEST-----
           MIIBlzCCAQACAQAwVzEJMAcGA1UEBhMAMQkwBwYDVQQIEwAxCTA
           etc etc
           -----END NEW CERTIFICATE REQUEST-----
         ii. Send the above information to your certificate authority (CA) and request a certificate.

STEP 5: Import the SSL certificate (Make sure you got certificate as VIP address name)
STEP #4. After you get the signed certificate from the CA, import it into the PeopleSoft database:
    a. Navigate to PeopleTools->Security->Security Objects->Digital Certificates
        i.  Click the 'import' link next to your certificate.
        ii. Paste in the certificate that you received (Server certificate only).
           Example:
           -----BEGIN CERTIFICATE-----
           MIIEJjCCA4+gAwIBAgIQMFbEDgfLmZ <-- Contents of Certificate
           etc etc
          -----END CERTIFICATE-----
        iii. Click OK

Validate the certificate is correct date and time by clicking Details>Configure REN – clear appserver/Webserver cache and reboot
Cert
RENSSLCertificate
Entrust Root and Intermed Cer
31/12/14  3:59:06PM
Add a new row at row 1 (Alt+7)
Delete row 1 (Alt+8)



No comments: